Scientific Linux SL7: SLSA-2019-2112-1 Moderate: mod_auth_openidc Issues
Aug 26, 2019
•
LinuxSecurity Advisories
1 min read
mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an "AuthType oauth20" configuration (CVE-2017-6413) * mod_auth_openidc: Shows user-supplied content on error pages (CVE-2017-6059) SL7 x86_64 mod_auth_openidc-1.8.8-5.el7.x86_64.rpm mod_auth_openidc-debuginfo-1.8.8-5.el7.x86_64.rpm - Scientific Linux Development Team
Synopsis: Moderate: mod_auth_openidc security update
Advisory ID: SLSA-2019:2112-1
Issue Date: 2019-08-06
CVE Numbers: CVE-2017-6413
CVE-2017-6059
--
Security Fix(es):
* mod_auth_openidc: OIDC_CLAIM and OIDCAuthNHeader not skipped in an
"AuthType oauth20" configuration (CVE-2017-6413)
* mod_auth_openidc: Shows user-supplied content on error pages
(CVE-2017-6059)
--
SL7
x86_64
mod_auth_openidc-1.8.8-5.el7.x86_64.rpm
mod_auth_openidc-debuginfo-1.8.8-5.el7.x86_64.rpm
- Scientific Linux Development Team
PREVIOUS
NEXT
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!